Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: ZKMNXMFc0Gox3n18tlvfmxkSlzVYBZb5sftD3K+KOvU=
Subject key identifier: EE:CA:B2:60:41:3E:5D:C0:0B:64:58:F4:91:79:5A:71:7C:6C:62:B7
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 019922C3567612E5D964E3C2CB84F074B0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 06:00:50 +0000
Manifest this update: Sun 07 Sep 2025 06:00:50 +0000
Manifest next update: Mon 08 Sep 2025 06:00:50 +0000
Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: 2x8F3lKxosGlNk1iyhLYB0zMaxiPcHNFOkB4EMN/PDo=)
3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:56:76:12:e5:d9:64:e3:c2:cb:84:f0:74:b0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: Sep 7 06:00:50 2025 GMT
Not After : Sep 8 06:00:50 2025 GMT
Subject: CN=eecab260413e5dc00b6458f491795a717c6c62b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:44:38:cd:66:e0:85:5d:64:18:96:6d:74:
1b:85:d2:10:41:b3:b2:a4:25:52:6e:33:a7:57:50:
93:fc:68:96:77:c2:13:29:bd:2c:2e:36:4f:5c:0d:
36:27:69:2a:88:49:de:60:23:89:a8:4d:4d:42:c5:
80:27:e0:4a:91:b4:da:9a:76:7c:2f:4e:55:48:2f:
34:69:a9:52:eb:93:57:94:ea:81:7b:0e:96:b4:ed:
aa:6a:e4:9b:0b:00:65:c1:d2:d8:dd:68:c0:3f:55:
1f:50:f7:69:7e:25:63:a0:77:80:13:71:e8:ed:a8:
3e:4c:d8:da:34:e7:0f:ff:6c:7c:10:10:4e:48:b9:
b9:3f:d8:95:de:ad:07:fc:f2:d7:12:b9:b2:8f:20:
94:21:dd:7e:d8:13:0f:71:8e:b1:bb:7e:78:17:3e:
c0:ad:4a:13:d2:8e:4c:3c:b4:b6:99:63:25:ab:83:
c4:d0:cf:75:f4:a2:13:22:29:39:2c:21:6d:cb:36:
67:3e:8a:25:1b:80:04:05:b1:9e:08:95:0e:a6:53:
a8:f0:cd:57:18:f6:30:cb:8f:06:cd:08:29:e9:ce:
c0:7b:69:f2:37:72:e4:e0:1b:b5:f2:29:f0:77:e4:
3f:19:a4:23:5e:ac:c2:0e:94:9b:7b:3f:ca:b1:77:
bb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CA:B2:60:41:3E:5D:C0:0B:64:58:F4:91:79:5A:71:7C:6C:62:B7
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dd:2d:b8:d7:87:e4:3e:42:df:83:5c:51:fe:41:6f:a4:4c:
65:88:65:a1:83:01:e1:d7:68:35:1a:c6:9b:7d:f8:12:a8:39:
4e:73:71:f8:6a:0e:4f:77:6d:7b:32:f5:37:8a:20:d7:3b:d6:
e3:3a:ab:f1:96:9c:76:90:67:26:f3:f2:3d:dc:f3:b2:13:75:
c0:46:4e:30:df:4a:d4:5f:4f:f7:c4:ff:cc:7d:15:f4:dd:f2:
17:e7:a8:c7:bc:5d:1a:00:1c:db:f2:36:9a:1b:68:e9:fc:9b:
14:6d:e0:c2:36:d9:92:b5:91:d5:66:4a:c8:8b:62:52:3f:6f:
c5:66:87:73:46:c3:c5:e3:85:8e:76:c5:e4:a9:56:8b:3a:e8:
92:67:fc:e5:d9:7f:c9:26:e8:be:6e:c7:ff:33:38:c9:ff:7d:
3d:da:69:93:ef:51:9b:b0:f5:d6:45:7a:28:2b:e9:57:88:b4:
65:e6:9f:4e:6e:7a:8a:77:b1:bf:65:28:d7:5e:ca:76:68:1d:
1b:18:2e:47:53:9b:c3:49:33:e5:f4:f6:a4:fa:a3:34:e3:5a:
5d:50:05:4d:8e:6c:d6:0b:bf:fc:2c:3b:92:1d:1f:31:6b:6d:
36:d1:e7:02:e2:3b:7b:71:07:77:eb:09:57:25:ec:76:f1:d0:
f3:3a:18:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:10:27 2025 by rpki-client